Replace the Public Keys of Remote Services

About this task

During the installation of Enterprise Edition Web Client, the installer uses the public keys of remote services such as Apache CouchDB and UAA. This allows HTTPS communication between Enterprise Edition Web Client applications and these remote services.

If you change the SSL certificate of these remote services, the communication fails. This topic describes how to resolve this issue.

Note: If the certificate is signed by a Global/Public CA Certificate provider, the pem file should contain the Server Certificate. If the Certificate is signed by Enterprise CA (certificate authority), then it should contain all certificate levels: the Root CA, the Intermediate Enterprise Certificate, and the Server Certificate. After you obtain the correct certificate, use the following steps.

Procedure

  1. You must define your configuration in the silentinstaller.yml file. Update the following parameter in the silentinstaller.yml file:
    Parameter Description
    UAA_PEM_PATH: "" Enter the path where the valid CA key file is located.

    For example, UAA_PEM_PATH: "/home/administrator/myca_certs/uaa_ca.pem"
  2. Access the utility.sh file in the plantapps-enterprise-webclient-<buildno> folder.
  3. Provide execution permissions to utility.sh file by running the following command: sudo chmod +x your/pathto/installer/plantapps-enterprise-webclient-<buildno>/utility.sh
  4. Remove the PApaMymachinesservice stack by running the following command: sudo docker stack rm PApaMymachinesservice.
  5. Run the utility.sh file by running one of the following commands:
    • If you are running this utility directly on the Enterprise Edition Web Client node: <installer path>/plantapps-enterprise-webclient-<buildno>/sudo ./utility.sh -l -pkey reset
    • If you are running this utility remotely on the Enterprise Edition Web Client node: <installer path>/plantapps-enterprise-webclient-<buildno>/sudo ./utility.sh -r -pkey reset
    The installer reads the existing installation configuration, and updates it with the new public keys of Apache CouchDB and UAA.